Posts tagged with

HackTheBox - Analytics Writeup

Analytics is an easy Hack The Box Linux machine featuring exposed HTTP and SSH services. A Metabase instance vulnerable to CVE-2023-38646 allows pre-auth RCE and initial access inside a Docker container. Environment variables expose SSH credentials for the host. Privilege escalation is achieved by exploiting the GameOverlay kernel vulnerability for root access.